SiYuan before v3.8.2 TLS Private Key Disclosure via getFile

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-85175 · Microsoft / collected KEV context

EUVD-2026-70410

GHSA-gg9w-4vv2-vjcm

GHSA-4wwp-f6gw-6qm5

GO-2026-6663

cve-program · CVE-2026-85175

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4wwp-f6gw-6qm5
• https://www.vulncheck.com/advisories/siyuan-before-3.8.2-tls-private-key-disclosure-via-getfile

euvd · EUVD-2026-70410

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4wwp-f6gw-6qm5
• https://www.vulncheck.com/advisories/siyuan-before-3.8.2-tls-private-key-disclosure-via-getfile

nvd · CVE-2026-85175

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4wwp-f6gw-6qm5
• https://www.vulncheck.com/advisories/siyuan-before-3.8.2-tls-private-key-disclosure-via-getfile

osv · GHSA-4wwp-f6gw-6qm5

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4wwp-f6gw-6qm5
• https://github.com/siyuan-note/siyuan/commit/256d73aa7f94aead7ba255b668e32c140af23137
• https://github.com/siyuan-note/siyuan
• https://github.com/siyuan-note/siyuan/releases/tag/v3.8.2

osv · GO-2026-6663

• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4wwp-f6gw-6qm5
• https://github.com/siyuan-note/siyuan/commit/256d73aa7f94aead7ba255b668e32c140af23137
• https://github.com/siyuan-note/siyuan/releases/tag/v3.8.2

No related operational record is retained in the current change model.